Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/8418c267-14b5-3ddd-a3bd-17f357f651b9.roa
File:                     8418c267-14b5-3ddd-a3bd-17f357f651b9.roa (raw, json)
Hash identifier:          cXfGsRshHnc6YeERCt3sJ5FnsJcmZ8RfmSf7ZO0L+fU=
Subject key identifier:   80:92:EA:AB:8A:DA:90:37:6C:CF:1C:2A:42:4F:9B:16:5A:80:AC:AB
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DF8B804C79A720F91ADE0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/8418c267-14b5-3ddd-a3bd-17f357f651b9.roa
Signing time:             Tue 12 May 2026 13:06:32 +0000
ROA not before:           Tue 12 May 2026 13:06:32 +0000
ROA not after:            Mon 10 Aug 2026 13:06:32 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:208::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:f8:b8:04:c7:9a:72:0f:91:ad:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:32 2026 GMT
            Not After : Aug 10 13:06:32 2026 GMT
        Subject: CN=216b5357-5d99-49cf-b95c-6875c11dd8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:9a:76:6e:46:6f:01:cf:97:55:5c:24:95:
                    e9:56:59:af:70:fd:4a:ea:d5:a2:8b:09:ad:19:29:
                    b3:2f:f3:4f:60:a8:71:b9:2f:db:65:93:9a:80:27:
                    ac:32:8b:a8:fa:ff:dd:cd:15:ed:8a:fd:47:51:c0:
                    15:10:95:c6:6e:b2:12:ef:5d:8e:b4:c5:90:aa:26:
                    87:74:30:43:e2:2d:35:26:9b:ec:0d:d7:3e:8e:dd:
                    d7:54:b5:07:92:f7:e9:0c:c6:a6:46:a3:45:36:31:
                    a6:c3:c5:58:02:c2:b9:73:a6:3d:a7:99:1e:c2:e4:
                    be:59:87:68:94:ee:13:2b:8d:a7:d5:2e:bc:0a:a1:
                    25:c7:6e:50:b9:f4:82:85:47:37:7d:96:22:bd:e2:
                    f4:47:4b:eb:f2:78:8b:92:39:20:22:e0:d3:16:9d:
                    fe:5c:76:06:de:8f:64:6a:88:b4:8c:44:34:da:7d:
                    d0:34:9e:ed:93:9d:fc:5f:28:2c:a1:e8:3b:91:a7:
                    a4:ec:d4:f9:e4:ed:0a:f8:b9:61:d7:8b:95:ad:9e:
                    ac:5d:c4:46:75:ef:f3:39:1b:48:74:95:05:a9:c0:
                    82:40:7d:b3:f1:9f:52:af:22:b2:32:59:7d:cf:ab:
                    2c:ad:42:cd:78:44:38:8c:0a:fa:d3:71:f6:27:f8:
                    67:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:92:EA:AB:8A:DA:90:37:6C:CF:1C:2A:42:4F:9B:16:5A:80:AC:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/8418c267-14b5-3ddd-a3bd-17f357f651b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:208::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:dc:23:65:65:ae:c9:85:4e:00:82:c6:00:a6:49:da:22:0d:
         21:b6:43:fb:6e:52:41:bc:81:79:2a:72:dc:52:0e:55:95:87:
         09:5e:5f:95:ff:9c:19:02:35:2e:77:65:e1:e2:27:1a:36:f7:
         3d:f8:7d:4b:68:53:59:18:68:93:b6:27:51:a4:e4:84:21:68:
         86:21:10:bf:09:cc:0e:99:04:9d:25:b7:0a:75:b2:d8:4b:84:
         10:a6:08:3e:88:f2:e4:83:3f:40:81:40:9d:fc:0c:a4:3f:d6:
         c7:32:cf:11:ba:95:56:df:ad:b8:3d:00:94:93:50:f3:75:0d:
         a1:8f:e3:40:12:73:9d:49:7c:31:2c:36:63:34:f4:bc:a0:d7:
         c9:61:5f:7f:e5:cb:91:e1:2c:fc:b4:b3:3d:de:1a:73:d6:fe:
         0d:93:26:de:84:e7:00:4b:7c:b5:2c:11:c6:7b:3d:b0:93:c1:
         04:82:b3:b6:54:09:70:d5:6b:58:9e:1b:ce:58:2e:41:ac:5c:
         52:a7:db:a0:b4:89:b8:a1:ea:4c:f6:39:ed:4d:1a:3a:d6:8e:
         39:e8:22:ef:17:9e:1c:b8:42:79:75:bb:42:af:13:2f:73:77:
         c5:99:b6:03:96:0f:82:0b:f7:22:f7:5e:27:74:2e:5c:e4:eb:
         95:9a:ce:7a
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLfi4BMeacg+RreAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYzMloXDTI2MDgxMDEzMDYzMlowLzEtMCsGA1UEAxMk
MjE2YjUzNTctNWQ5OS00OWNmLWI5NWMtNjg3NWMxMWRkOGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovaadm5GbwHPl1VcJJXpVlmvcP1K6tWiiwmt
GSmzL/NPYKhxuS/bZZOagCesMouo+v/dzRXtiv1HUcAVEJXGbrIS712OtMWQqiaH
dDBD4i01JpvsDdc+jt3XVLUHkvfpDMamRqNFNjGmw8VYAsK5c6Y9p5kewuS+WYdo
lO4TK42n1S68CqElx25QufSChUc3fZYiveL0R0vr8niLkjkgIuDTFp3+XHYG3o9k
aoi0jEQ02n3QNJ7tk538Xygsoeg7kaek7NT55O0K+Llh14uVrZ6sXcRGde/zORtI
dJUFqcCCQH2z8Z9SryKyMll9z6ssrULNeEQ4jAr603H2J/hnNQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFICS6quK2pA3bM8cKkJPmxZagKyrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvODQxOGMyNjctMTRiNS0z
ZGRkLWEzYmQtMTdmMzU3ZjY1MWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AggwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAjtwjZWWuyYVOAILGAKZJ2iINIbZD+25SQbyBeSpy3FIOVZWH
CV5flf+cGQI1Lndl4eInGjb3Pfh9S2hTWRhok7YnUaTkhCFohiEQvwnMDpkEnSW3
CnWy2EuEEKYIPojy5IM/QIFAnfwMpD/WxzLPEbqVVt+tuD0AlJNQ83UNoY/jQBJz
nUl8MSw2YzT0vKDXyWFff+XLkeEs/LSzPd4ac9b+DZMm3oTnAEt8tSwRxns9sJPB
BIKztlQJcNVrWJ4bzlguQaxcUqfboLSJuKHqTPY57U0aOtaOOegi7xeeHLhCeXW7
Qq8TL3N3xZm2A5YPggv3IvdeJ3QuXOTrlZrOeg==
-----END CERTIFICATE-----
Generated at Wed May 13 11:03:58 2026 by rpki-client